Does anybody happen to know if it’s currently possible to check whether or not a MacOS device’s firmware password is enabled or not? You can do this with an Apple utility as root:

firmwarepasswd -check

I am not sure what table in OSQuery would be the equivalent.. system preferences or SMC maybe?